PT-2018-10626 · Western Digital · Western Digital Tv Live Hub+1

Published 2018-06-12 · Updated 2019-05-28 · CVE-2018-1151

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Western Digital TV Media Player version 1.03.07 Western Digital TV Live Hub version 3.12.13

Description The issue allows unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to the "toServerValue.cgi" endpoint.

Recommendations For Western Digital TV Media Player version 1.03.07, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available. For Western Digital TV Live Hub version 3.12.13, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-1151

Affected Products

Western Digital Tv Live Hub

Western Digital Tv Media Player

References · 3

• 🔥 https://tenable.com/security/research/tra-2018-14 · Exploit
• https://osv.dev/vulnerability/CVE-2018-1151 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1151 · Security Note